icon Get the most out of Surmunity, read our tips here! Need an interesting blog to read? You've got to read the Surpass Blog! | Welcome! Please register to access all of our features.

» Surpass Web Hosting Forums » Discussions » Email » Make SPAM ASSASSIN work for you...

Email General questions, webmail, mailing lists.

Reply
 
LinkBack Thread Tools Search this Thread Rating: Thread Rating: 11 votes, 4.82 average.
Old October 24th, 2006, 11:41 AM   #91 (permalink)
Registered User
Fresh Surpasser
 
Joined in Sep 2003
Lives in Spokane, Washinton
Hosted on SH124
6 posts
Gave thanks: 0
Thanked 1 Time in 1 Post
Quote:
Originally Posted by Bigjohn View Post
those are in the mail/spam assassin cpanel.
That's where I was. Below is a screenshot of PART of the screen. The rest is 5 score fields and 5 whitelist_from fields
Attached Thumbnails
make-spam-assassin-work-you-clipboard01.jpg  
avagodro is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old October 24th, 2006, 11:55 AM   #92 (permalink)
minor deity
Super #1
 
Bigjohn's Avatar
 
Joined in Apr 2004
Lives in Georgia
Hosted on XEON
7,364 posts
Gave thanks: 25
Thanked 94 times
rewrite header subject is same as TAG... seems spam assassin evolved it's language a little. You're in the right place.
__________________
Proud to be a Surmunity Mod!
XEON PASS60 PASS61
Make a fundamental difference!
My Sites:
Curious about Brewing Beer? Join the community!
>>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax
Get into an Art museum
Victorian London
It's your brain -ON WEB - mybrainhost.com (under development)
What SHOULD Government do? Much Less than it Does!
Bigjohn is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old October 25th, 2006, 10:27 AM   #93 (permalink)
Registered User
Fresh Surpasser
 
Joined in Apr 2004
Lives in Reykjvík, Iceland
19 posts
Gave thanks: 0
Thanked 0 times
Only one problem

I use squirrelmail and I can't see a Copy operator on mails, just forward and move.

Am I missing something here?

I looked into installing a copy of squirrelmail and it really doesn't look feasible without shell access (althou one could perhaps get past that with making a script and running it with cron)

It's been about 2 weeks since the spam flood finally hit me, don't know which online action got me on the lists, been quite spam free for about 21 yeard now with the same email addy.

Thanx for a great thread and explanation.
__________________
I am the Barber of Seville
Server: xxx.xxx.238.158
Domain: arnists.com
arnists is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old October 25th, 2006, 11:36 AM   #94 (permalink)
minor deity
Super #1
 
Bigjohn's Avatar
 
Joined in Apr 2004
Lives in Georgia
Hosted on XEON
7,364 posts
Gave thanks: 25
Thanked 94 times
I use hastymail. Easy to install, and super cool.

What usually gets you is someone you've been in contact with gets jammed up with some spyware... bang, your email address and everyone else he's ever sent to, get into the spamsystem...

John
__________________
Proud to be a Surmunity Mod!
XEON PASS60 PASS61
Make a fundamental difference!
My Sites:
Curious about Brewing Beer? Join the community!
>>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax
Get into an Art museum
Victorian London
It's your brain -ON WEB - mybrainhost.com (under development)
What SHOULD Government do? Much Less than it Does!
Bigjohn is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old October 30th, 2006, 7:08 PM   #95 (permalink)
Registered User
Fresh Surpasser
 
Joined in Sep 2003
Lives in Spokane, Washinton
Hosted on SH124
6 posts
Gave thanks: 0
Thanked 1 Time in 1 Post
No Bayes yet?

I have been running the Bayes learning for several days now. I had to have Admin install the DB on the server. However, I have yet to see any Bayes listed in any of the message headers. Any thoughts? Here is what my cron report looks like:

Learning SPAM
Processing /home/avagodro/mail/***.com/stevev/SPAM
Learned tokens from 48 message(s) (505 message(s) examined)
Processing /home/avagodro/mail/***.com/webmaster/SPAM
Learned tokens from 3 message(s) (12 message(s) examined)
Processing /home/avagodro/mail/***.com/nella/SPAM
Learned tokens from 39 message(s) (228 message(s) examined)
Learning HAM
Processing /home/avagodro/mail/***.com/stevev/HAM
Learned tokens from 0 message(s) (0 message(s) examined)
Processing /home/avagodro/mail/***.com/webmaster/HAM
Learned tokens from 1 message(s) (5 message(s) examined)
Processing /home/avagodro/mail/***.com/nella/HAM
Learned tokens from 0 message(s) (0 message(s) examined)
Done

Also, I have been examining some messages and they don't even show the X-Spam Filter.
avagodro is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old October 30th, 2006, 8:11 PM   #96 (permalink)
minor deity
Super #1
 
Bigjohn's Avatar
 
Joined in Apr 2004
Lives in Georgia
Hosted on XEON
7,364 posts
Gave thanks: 25
Thanked 94 times
you will have to learn from between 500 and 1000 messages before bayes scores start showing in your spam. Looks like the process is working for you so far! Xpam does not mean anything, by the way.

I check my email using a program called HastyMail. It's a web mail program that allows me to see the full "raw" view of the message.

Here is an example of one of my recent spams:
Code:
Content preview:  Dear Home Owner, Your crd. scoring doesn't matter to us.
  If you own property and need immediate capital to use any way you want
  or simply want to decrease your monthly payments by a third or more,
  fill out this uncomplicated, secure 1 min. form for an instant quote. No
  sensitive information will be asked on the form [...] 

Content analysis details:   (7.4 points, 4.5 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.5 BAYES_50               BODY: Bayesian spam probability is 40 to 60%
                            [score: 0.5000]
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [200.127.204.41 listed in dnsbl.sorbs.net]
 3.9 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [200.127.204.41 listed in sbl-xbl.spamhaus.org]



------------=_45468112.682408BB
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from [200.127.204.41] (helo=36F87888)
	by xeon.dizinc.com with smtp (Exim 4.52)
	id 1Gefut-0005aR-0U
	for john@stegenga.net; Mon, 30 Oct 2006 17:47:44 -0500
Received: (from AlankndSutherlanden@excite.com@localhost)
	by AlankndSutherlanden@excite.com.net MqFx id g42Ls1T0.4228;
	Tue, 31 Oct 2006 01:38:27 +0300
Message-Id: <biceps.auditory@g42Ls1T0.18.com>
From: "AlankndSutherlanden@excite.com" <RaphaelvudRosadutj@excite.com>
Date: Tue, 31 Oct 2006 01:39:27 +0300
To: john@stegenga.net
Subject: contractual
X-Mailer: Ximian Evolution
X-Spam-Exim: iiIt8TABS4gOCYYYE49CM0dF

Dear Home Owner, 

Your crd. scoring doesn't matter to us. If you own property
and need immediate capital to use any way you want or simply want 
to decrease your monthly payments by a third or more,
fill out this uncomplicated, secure 1 min. form for an instant quote.
No sensitive information will be asked on the form

Dont worry about approval, your cr. will not disqualify you
we specialize in all kinds of scores.
So, as you see, bayes is not the end-all / be-all. A lot of time its the number of block lists that the message is in that cause the flagging.

that was a low-score spam. This is a high score spam, which Cowboys filter mod helps me ditch more and more of automatically:

Code:
Content preview:  [...]

Content analysis details:   (18.4 points, 4.5 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.1 HELO_DYNAMIC_DHCP      Relay HELO'd using suspicious hostname (DHCP)
 1.1 EXTRA_MPART_TYPE       Header has extraneous Content-type:...type= entry
 2.2 INVALID_DATE           Invalid Date: header (not RFC 2822)
 0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay lines
 0.1 HTML_90_100            BODY: Message is 90% to 100% HTML
 2.0 BAYES_60               BODY: Bayesian spam probability is 60 to 80%
                            [score: 0.6358]
 1.1 MIME_HTML_MOSTLY       BODY: Multipart message mostly text/html MIME
 0.2 HTML_MESSAGE           BODY: HTML included in message
 3.1 HTML_IMAGE_ONLY_08     BODY: HTML: images with 400-800 bytes of words
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [213.222.143.33 listed in dnsbl.sorbs.net]
 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <http://www.spamcop.net/bl.shtml?213.222.143.33>]
 1.9 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                            [213.222.143.33 listed in combined.njabl.org]
John
__________________
Proud to be a Surmunity Mod!
XEON PASS60 PASS61
Make a fundamental difference!
My Sites:
Curious about Brewing Beer? Join the community!
>>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax
Get into an Art museum
Victorian London
It's your brain -ON WEB - mybrainhost.com (under development)
What SHOULD Government do? Much Less than it Does!
Bigjohn is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old October 30th, 2006, 8:15 PM   #97 (permalink)
Searcher
Surpass Staff
 
Kayla's Avatar
 
Joined in May 2003
Lives in Orlando
24,692 posts
Gave thanks: 943
Thanked 806 times
Hi everyone..

I wanted to ask if anyone here is interested in paying for an extra service for a few dollars a month (no more than $5 I would imagine) for a third party filtering service? I have been thinking about this for a few weeks. There are free tools available to combat spam, but it may be worth it to some to have mail filtered at an outside source before even reaching you.

One I have been researching is: http://www.katharion.com
__________________
Follow Surpass on Twitter and Facebook
Check out interesting finds on the Surpass Blog
.... it's coming.


Kayla is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old October 30th, 2006, 9:28 PM   #98 (permalink)
Registered User
Fresh Surpasser
 
Joined in Sep 2003
Lives in Spokane, Washinton
Hosted on SH124
6 posts
Gave thanks: 0
Thanked 1 Time in 1 Post
Quote:
Originally Posted by Kayla View Post
Hi everyone..

I wanted to ask if anyone here is interested in paying for an extra service for a few dollars a month (no more than $5 I would imagine) for a third party filtering service? I have been thinking about this for a few weeks. There are free tools available to combat spam, but it may be worth it to some to have mail filtered at an outside source before even reaching you.

One I have been researching is: http://www.katharion.com

It would be something to look at. Sometimes I wish we had a filter like we have at my work. We use PureMessage (http://www.sophos.com/products/es/email/) but the spam has really increased lately.
avagodro is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
This user thanks avagodro for this great post!
Kayla (October 30th, 2006)
Old October 30th, 2006, 9:53 PM   #99 (permalink)
Searcher
Surpass Staff
 
Kayla's Avatar
 
Joined in May 2003
Lives in Orlando
24,692 posts
Gave thanks: 943
Thanked 806 times
So right now a lot of spam is coming through with PureMessage?
__________________
Follow Surpass on Twitter and Facebook
Check out interesting finds on the Surpass Blog
.... it's coming.


Kayla is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On